Hold up, is this a trick question? I'm going with B and D, but only if the correct answers come with a complimentary fridge magnet that says 'I caught the issue' on it.
A and C, all the way! Attestation results and policy exceptions are the real deal. It's like trying to hide a T-Rex in your backpack - you can't ignore those big issues!
Hmm, I'd have to go with B and D. Failed indicators and untested controls? That's a recipe for disaster! We need to be on top of those like a cat on a laser pointer.
I'd say C and D are the way to go. Policy exceptions and unfinished control tests are just as important to track. Gotta keep those auditors happy, you know?
I agree with Willow, because if the attestation result is not implemented or the indicator result is failed, then an issue should be created automatically.
A and B, of course! Automatic issue creation is a must-have for keeping our security in check. Wouldn't want any 'Not Implemented' or 'Failed' issues slipping through the cracks!
Clarence
9 months agoAnika
8 months agoErick
8 months agoBethanie
8 months agoAlysa
9 months agoArminda
9 months agoDona
9 months agoVeronique
8 months agoCassie
8 months agoFrancesco
8 months agoArlene
8 months agoJuliann
9 months agoJolanda
9 months agoWillow
10 months agoKaran
10 months agoPamella
9 months agoLouvenia
9 months agoMalissa
9 months agoYvonne
9 months ago